Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: 5SmmZBear6Hi5rT+tAYcZmOrNuogDg6LA8THSiP1/hc=
Subject key identifier: C8:A7:AB:34:CA:23:1D:3A:09:BA:9D:B5:80:F8:47:E3:95:A3:5C:6C
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 0199FBEABF2318739E6A426CC035204AD12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: 8TiiymF_qXe5_0OSXGhXtrvPRF8.roa (hash: GluSxaIDrro0bR3RvWbGWujqLOuubQy6kwNOc8o6hgc=)
2: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: JAWreGxuwJ3Xa+7YeeFzkotSaZvztPoxwi88cWTYlWU=)
3: wqgIahTiUfpB5-vEurFskts5IVA.roa (hash: XTqqN0VPVFji7V2+PpE1m4lwBVLsT9DZSImWN2tqtPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bf:23:18:73:9e:6a:42:6c:c0:35:20:4a:d1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=c8a7ab34ca231d3a09ba9db580f847e395a35c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:4b:53:9a:e4:33:fb:a5:9b:43:a2:f0:95:
80:45:dd:38:e2:a3:36:5b:c9:14:32:3b:65:ba:e1:
77:0c:5e:51:50:2e:4a:26:3b:e0:55:b4:07:46:43:
e2:21:05:f7:90:39:1c:68:a4:37:9f:c6:17:3c:8d:
a9:b2:0e:c1:f6:6a:41:27:57:ce:e2:07:84:74:13:
8e:72:41:d3:30:07:2a:76:2d:f6:f3:65:1d:2f:4e:
99:ab:8c:04:eb:f5:9e:eb:ff:55:58:34:18:5a:04:
ef:01:c7:7f:06:1a:76:8f:99:ac:37:c4:7f:75:10:
3f:8b:78:03:f6:46:98:a3:eb:46:18:33:fa:08:c4:
3b:40:6f:d0:c2:c8:e6:3d:a6:2e:51:66:0f:38:37:
cf:48:18:2d:15:61:23:46:67:a7:f1:c9:4f:1d:76:
eb:2c:7b:3e:9c:04:65:d5:9c:0a:ee:bc:72:8b:a1:
5e:82:d5:b8:94:3f:45:d6:1b:b1:8a:a3:1e:70:08:
7b:dc:8c:28:57:11:d9:77:88:e2:00:48:cd:0c:1f:
9e:17:cf:b1:12:2e:46:01:4c:0e:00:2b:05:ca:e1:
fb:5b:e2:99:27:be:20:c8:35:91:d6:47:e8:2f:4b:
50:0e:c3:b7:31:53:d6:a2:43:07:4f:15:21:dd:24:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A7:AB:34:CA:23:1D:3A:09:BA:9D:B5:80:F8:47:E3:95:A3:5C:6C
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:10:18:5f:7b:c8:3d:ac:3c:84:8f:46:3e:e9:42:f3:89:73:
f8:e5:44:3d:2c:a5:b6:18:50:cc:7f:d7:e7:ed:45:e7:59:8f:
b6:5c:31:a4:a8:83:b8:7e:6a:b5:58:64:f7:85:ca:e8:60:13:
46:6f:ed:7b:8f:1b:6a:7d:6f:ee:d8:9a:89:f6:37:0d:2b:7c:
c3:ac:fe:6e:36:96:24:94:a7:29:4b:6e:0c:c6:f1:8f:93:32:
30:3a:ee:f9:3f:d4:55:ca:00:07:41:c6:e4:bd:65:67:7d:b0:
0c:04:55:61:de:fc:2b:0f:d5:1d:2d:77:4d:15:4b:79:ad:4c:
60:3b:89:1a:39:04:6a:ec:49:57:df:b8:a5:e2:f1:ed:d7:7c:
31:14:a6:7e:5a:10:b3:10:43:16:da:a2:31:ad:58:05:37:55:
3a:2d:db:c4:7e:65:d7:af:f1:2a:0c:cc:9a:e2:0f:50:6f:d5:
73:56:8d:13:54:19:a3:cb:2c:29:e0:a6:3c:40:3f:3e:17:f9:
f0:dd:64:5b:6d:2c:f7:60:7e:eb:c5:0d:04:ba:61:ad:d4:a5:
9c:63:47:14:1c:4b:06:ab:89:95:27:29:21:a3:13:79:20:1d:
81:48:af:a0:c2:f3:71:6f:6a:77:1c:82:4e:38:8c:1a:2b:c3:
83:a8:a5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:58 2025 by rpki-client